HTTP Authentication in URL not working in IE

IE (Internet Explorer) doesn’t work with user names and passwords in Web site addresses URLs (HTTP/S).

Though, IE versions 3.0 to 6.0 support this.

The following URL syntax may not work in Internet Explorer or in Windows Explorer,

http(s)://username:password@mydomain.com

Reason:

Such URL syntax is used to automatically send username/password to a Web site which requires basic authentication.

A hacker may exploit this nomenclature and make a hyperlink which looks like opening a legal/intended Web site but in reality opens a another, e.g., http://www.expertsguide.info@example.com doesn’t open http://www.expertsguide.info which you would think should, rather opens http://example.com

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>